PCI Compliant Secure and Reliable Billing Software

PCI DSS Level 1 Compliant

Chargify is annually audited to maintain the highest level of PCI compliance for a service handling sensitive payment data. With billing information flowing through Chargify, you can comply with industry-standard security practices without the time and resources required to maintain such standings. Our number one goal is to protect you and your customers.

Download Chargify’s compliance validation

SOC 1 Type I Report

Service Organization Controls (SOC) exist to validate a company’s controls and ensure industry standards are followed. Our SOC 1 report was prepared in accordance with the Statement on Standards for Attestation Engagements No. 16 (a.k.a SSAE 16) and documents operational policies and procedures for Chargify’s system of internal controls.

Two-Factor Authentication

As a security best practice, we require secure passwords for all Chargify users. As an additional layer of protection, we provide the ability to enable two-factor authentication. When enabled, internal team members will have to enter an authentication token from their mobile device prior to gaining access to the Chargify interface.

Fine-Grained User Access Controls

Your teams play important roles in running your subscription business, but not every team member needs full access to Chargify’s interface. Customer support needs to access and manage subscription information, finance needs to view and export financial metrics, etc. Our access controls allow you define what users can see and do within your Chargify account.

Reliability You Can Count On

Data Redundancy

Our software runs in three datacenters across the US. On a daily basis, we export the database and store it in an offsite facility for extra redundancy.

24/7 Monitoring

Extensive performance and availability monitoring allows us to keep a close eye on system health and mitigate unforeseen issues early on.

99.99% Uptime

Uptime is as mission critical to us as it is your business. In 2016 we provided 99.99+% uptime, and we’re fanatical about maintaining our excellent track record. View our uptime report.

Hacker Tested

We regularly submit ourselves to hacking by the best "good-guy" hackers in the business. This practice ensures we remain the most reliable, secure system in the industry.

PGP Key

By default, we provide a PGP key to encrypt sensitive communication that you send to us.

Key ID:: 3DBC982D
Key type:: RSA
Key size:: 4096
User ID:: Chargify Security (security@chargify.com)
Fingerprint:: 4182 C0F7 2DF8 189A 0E41 598A 4897 3F45 3DBC 982D
Expires:: 2018-07-12

Help Us Keep Chargify Secure

If you believe you have discovered a potential flaw in any area of Chargify's security measures, we ask that you please share the information with us first and retain secrecy of your findings until we have remediated the issue. If you have identified a vulnerability, report it via the Chargify disclosure program managed through Bugcrowd to be eligible for a reward.

Secure and Reliable Billing Software